ViceLeaker Analiza

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (9)

Język

en	8
fr	2

Kraj

fr	6
us	2
to	2

Aktorzy

ViceLeaker	3
DarkGate	1

Wysiłek

Rodzaj

Operating System	4
Not Defined	4
Network Management Software	2

Sprzedawca

Not Defined	4
Red Hat	2
Socomec	2
Microsoft	2

Produkt

Zabbix	2
Red Hat Enterprise Linux	2
PHPMailer	2
Socomec DIRIS A-40	2
Microsoft Windows	2

Luki w zabezpieczeniach

#	Słaby punkt	Base	Temp	0day	Dzisiaj	Wyk	Prz	EPSS	CTI	CVE
1	Google Chrome DOM privilege escalation	5.3	4.6	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.01126	0.00	CVE-2015-1293
2	Socomec DIRIS A-40 Web Interface password.jsn Password information disclosure	7.5	7.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.12379	0.00	CVE-2019-15859
3	Magnolia CMS Freemark Filter Privilege Escalation	5.5	5.3	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00220	0.00	CVE-2021-46361
4	Elastic Vega Charts Kibana cross site scripting	4.8	4.7	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00078	0.00	CVE-2022-23713
5	Zabbix Link cross site scripting	3.9	3.9	$0-$5k	Obliczenie	Not Defined	Official Fix	0.00054	0.00	CVE-2022-35230
6	Microsoft Windows Path Canonicalisation EclipsedWing privilege escalation	7.3	6.8	$25k-$100k	$0-$5k	High	Official Fix	0.97477	0.04	CVE-2008-4250
7	PHPMailer privilege escalation	8.5	8.2	$5k-$25k	$0-$5k	High	Official Fix	0.97129	0.02	CVE-2016-10033
8	Red Hat Enterprise Linux Linux Kernel memory corruption	5.8	5.8	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00059	0.03	CVE-2018-10872
9	Linux Kernel create_elf_tables memory corruption	7.0	6.8	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00043	0.02	CVE-2018-14634

Kampanie (1)

These are the campaigns that can be associated with the actor:

ViceLeaker

IOC - Indicator of Compromise (3)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	adres IP	Hostname	Aktor	Kampanie	Identified	Rodzaj	Pewność siebie
1	185.141.60.21		ViceLeaker	ViceLeaker	2020-12-22	verified	Wysoki
2	XXX.XXX.XX.XX		Xxxxxxxxxx	Xxxxxxxxxx	2020-12-22	verified	Wysoki
3	XXX.XXX.XX.XX	xxxxxxxxx.xxx.xxxx	Xxxxxxxxxx	Xxxxxxxxxx	2020-12-22	verified	Wysoki

TTP - Tactics, Techniques, Procedures (5)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Klasa	Luki w zabezpieczeniach	Wektor dostępu	Rodzaj	Pewność siebie
1	T1059	CAPEC-242	CWE-94	Argument Injection	predictive	Wysoki
2	TXXXX.XXX	CAPEC-209	CWE-XX	Xxxxx Xxxx Xxxxxxxxx	predictive	Wysoki
3	TXXXX	CAPEC-	CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	Wysoki
4	TXXXX	CAPEC-136	CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	Wysoki
5	TXXXX	CAPEC-102	CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	Wysoki

IOA - Indicator of Attack (2)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Klasa	Indicator	Rodzaj	Pewność siebie
1	File	/password.jsn	predictive	Wysoki
2	Pattern	\|xx\|	predictive	Niski

Referencje (2)

The following list contains external sources which discuss the actor and the associated activities:

◂ PoprzedniPrzeglądKolejny ▸

Might our Artificial Intelligence support you?

Check our Alexa App!